PROTOCOL & METADATAEXPERTISE

INDUSTRY-LEADING CLASSIFICATION & METADATA EXTRACTION

Qosmos Deep Packet Inspection (DPI)-based technology identifies data traveling over networks in real time, providing a true picture of the traffic by identifying protocols, types of application, and extracting additional information in the form of metadata. Qosmos DPI engine recognizes over 3200 protocols and can extract over 5000 metadata – more than any other on the market. Equipment makers, telco and enterprise software vendors use the technology to gain application visibility, accelerate time to market and benefit from continuous signature updates.

Enea’s Qosmos technology typically recognizes over 97% of network traffic including regional applications. Each Qosmos signature is augmented with specific characteristics (such as family and tags) to enhance service awareness and enable highly accurate processing.

Qosmos advanced techniques also mean that our technology can classify most types of encrypted traffic.

Recognition rate of fully encrypted protocols based on new statistical algorithms with self-learning capabilities. Applications like Vuze®, uTorrent®, BitTorrent® are correctly identified 95% of the time

Custom Signature Module to create customized signatures for any category of application including URLs, HTTP based applications, binary applications, etc.

EXAMPLE OF SIGNATURE WITH ADDITIONAL INFORMATION

SIGNATURE

EXAMPLES OF CHARACTERISTICS & METADATA

BitTorrent

Multiple client access, P2P service, File transfer workflow

YouTube

Video, URL, date, duration, frame rate, +30 other metadata

MSFT Lync

Service identification, IM, database

RTSP

Play/pause, streamed file, URL, video duration, +40 other metadata

Skype

Service identification, VoIP service, IM

iTunes

Multimedia streaming

WhatsApp

Program version, service identification, IM

CONTINUOUS UPDATES

Qosmos Labs has accumulated more than 10 years of expertise in identifying IP protocols and applications and detecting their changes. This enables us to remain one step ahead of the competition and provide our customers with the most complete and reliable DPI and metadata extraction engine.

Our international team of protocol experts and developers work around-the-clock gathering traffic samples and reverse engineering new protocols. Our long experience ensures a solid software supply chain based on robust processes and in-house tools, such as the Protocol Development Language (PDL) and protocol signatures in data format, that we have developed to speed up protocol plugin development and make our technology more accurate while ensuring the highest standards of quality.

Qosmos can also provide the tools for customers who want to develop specific signatures themselves.

ADVANCED INSPECTION TECHNIQUES

Beyond complex protocols which have to be tested in different configurations (e.g. throttling and blocking workflows), Qosmos also performs a series of automated tests to ensure that classification is free from false positives.

In order to handle more complex applications and increasing encryption, Qosmos Labs has added new approaches to identify protocols, based on a combination of advanced techniques: e.g. behavioral recognition, regexp, statistical analysis, flow correlation, and DNS matching.